All of lore.kernel.org
 help / color / mirror / Atom feed
* [PATCH v6 0/2] audit: improve NETFILTER_PKT records
@ 2025-11-13 13:36 Ricardo Robaina
  0 siblings, 0 replies; only message in thread
From: Ricardo Robaina @ 2025-11-13 13:36 UTC (permalink / raw)
  To: audit, linux-kernel, netfilter-devel, coreteam
  Cc: paul, eparis, fw, pablo, kadlec, Ricardo Robaina

Currently, NETFILTER_PKT records lack source and destination
port information, which is often valuable for troubleshooting.
This patch series adds ports numbers, to NETFILTER_PKT records.

The first patch refactors netfilter-related code, by moving
duplicated code to audit.c, by creating audit_log_nf_skb()
helper function.
The second one, improves the NETFILTER_PKT records, by 
including source and destination ports for protocols of
interest.

Ricardo Robaina (2):
  audit: add audit_log_nf_skb helper function
  audit: include source and destination ports to NETFILTER_PKT

 include/linux/audit.h    |   8 ++
 kernel/audit.c           | 159 +++++++++++++++++++++++++++++++++++++++
 net/netfilter/nft_log.c  |  57 +-------------
 net/netfilter/xt_AUDIT.c |  57 +-------------
 4 files changed, 169 insertions(+), 112 deletions(-)

-- 
2.51.1


^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2025-11-13 13:37 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-11-13 13:36 [PATCH v6 0/2] audit: improve NETFILTER_PKT records Ricardo Robaina

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.